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• Deutsche Bank agreed April 23 to pay $2.5 billion to settle allegations that bank employees 
in London, New York City, Frankfurt, and Tokyo had knowingly manipulated benchmarks 
used to set interest rates on trillions of dollars in mortgages, student loans, credit cards, and 
other debt from 2005 - 2009. - New York Times (See item 5 ) 

• A 6-mile stretch of eastbound Interstate 16 in Bryan County, Georgia, was closed for at 
least 6 hours April 22 due to a multi-vehicle, chain-reaction crash that killed 5 individuals, 
injured 3 others, and damaged 7 vehicles. - Associated Press (See item 8) 

• The U.S. Department of Agriculture reported April 22 that H5N2 avian flu infections were 
confirmed on 13 additional Minnesota farms with over 430,000 turkeys. - Associated Press 
(See item 10 ) 

• Repair work was scheduled to begin April 23 on a collapsed sewer line in Davenport, Iowa, 
that discharged about 3,000 to 5,000 gallons of untreated wastewater per day into 
tributaries of the Mississippi River. - WQAD 8 Moline (See item 13 ) 
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Energy Sector 



1. April 22, WXIA 11 Atlanta - (Georgia) Man dies after helping co-worker at 
Douglasville refinery. Officials at Asphalt Refining and Technology Company in 
Douglas County, Georgia, reported April 22 that air levels tested normal after a worker 
died when a vent opened and released hydrogen sulfide gas, spraying the worker in the 
face and causing him to fall from a platform. Three other workers were transported to 
an area hospital, including one that went into cardiac arrest prior to the discharge of the 
gas. 

Source: 

http://www.llalive.com/story/news/local/douglasville/2015/04/22/douglasville- 
refinery-accident/26207 013/ 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. April 22, U.S. Consumer Product Safety Commission - (National) Shark vacuum 
cleaners recalled by Euro-Pro due to shock hazard. Euro-Pro issued a recall for 
approximately 142,000 Shark brand Rotator Powered Lift- Away series upright vacuum 
cleaners sold in the U.S., due to an electric shock risk caused when the product’s 
aluminum wand remains energized if it disconnects from the vacuum cleaner’s handle. 
The product was sold at various retail stores nationwide, through Web based sales, and 
via television infomercials from August 2014 - March 2015. 

Source: http://www.cpsc.gov/en/Recalls/2015/Shark-Vacuum-Cleaners-Recalled-by- 
Euro-Pro 

3. April 22, U.S. Department of Labor - (Georgia) Worker suffers broken wrist and 
lacerations while performing machine maintenance work at Atlanta’s American 
Air Filter Co. The Occupational Safety and Health Administration issued Atlanta- 
based American Air Filter Co. Inc., citations for two repeat and one serious violation 
April 22 for failing to protect employees from being hit-by or caught between moving 
machine parts by not ensuring proper written procedures were followed. Proposed fines 
total $115,500. 

Source: 
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https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=27831 



4. April 21, U.S. Consumer Product Safety Commission - (National) Lenovo expands 
recall of battery packs for ThinkPad notebook computers due to fire hazard. 
Lenovo expanded a previously issued recall to include approximately 148,800 
ThinkPad notebook computer battery packs sold in the U.S., due to fire hazards posed 
by a battery overheating issue. The products were sold in computer and electronic 
stores and through authorized dealers nationwide and via Internet sales from 2010 - 
2012 . 

Source: http://www.cpsc.gov/en/Recalls/2015/Lenovo-Expands-Recall-of-Batterv- 
Packs-for-ThinkPad-Notebook-Computers 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. April 23, New York Times - (International) Deutsche Bank to pay $2.5 billion fine to 
settle rate-rigging case. U.S. and United Kingdom officials reported April 23 that 
Deutsche Bank will pay $2.5 billion to authorities to settle allegations that bank 
employees in London, New York City, Lrankfurt, and Tokyo had knowingly 
manipulated benchmarks used to set interest rates on trillions of dollars in mortgages, 
student loans, credit cards, and other debt from 2005 - 2009. Other terms included the 
guilty plea by a British subsidiary, the firing of 7 managers suspected of involvement, 
and the installation of an independent monitor to confirm that the bank complies with 
New York laws. 

Source: http://www.nytimes.com/2015/04/24/business/dealbook/deutsche-bank- 
settlement-rates .html 



Lor another story, see item 18 
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Transportation Systems Sector 

6. April 23, WTOP 103.5 FM Washington, D.C. - (Virginia) Ink spill causes backup on 
1-95 in Va. All lanes of northbound Interstate 95 in Prince William County were closed 
for approximately 6 hours April 23 after a semi-truck rear-ended another semi-truck 
carrying ink, causing it to overturn and spill ink onto the roadway. 

Source: http://wtop.com/prince-william-countv/2015/04/ink-spill-causes-backup-on-i- 
95-in-va/ 
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7. April 23, Associated Press - (New York) Passengers treated, released after flight 
diverts to Buffalo. A SkyWest airlines flight that was headed to Connecticut from 
O’Hare International Airport in Chicago made an emergency landing at Buffalo 
Niagara International Airport in New York April 22 after three passengers lost 
consciousness during the flight. The passengers received medical attention upon 
landing and an investigation into the incident is ongoing. 

Source: http://www.wbtv.com/storv/28871904/iet-carrving-unconscious-passenger- 
makes-emergency-landing 

8. April 22, Associated Press - (Georgia) 5 nursing students killed in Georgia 
interstate crash. A 6-mile stretch of eastbound Interstate 16 in Bryan County, Georgia, 
was closed for at least 6 hours April 22 due to a multi- vehicle, chain-reaction crash that 
killed 5 individuals, injured 3 others, and damaged 7 vehicles. 

Source: http://www.wsbtv.com/ap/ap/south-carolina/5-dead-3-iniured-in-fiery-crash- 
on-georgia-interst/nkzpB/ 
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Food and Agriculture Sector 

9. April 23, Food Poisoning Bulletin - (New York; New Jersey) Ossie’s fish recalled for 
undeclared allergens. SM Fish Corp issued recalls for certain lots of Ossie’s-branded 
fish products due to undeclared milk and eggs. The products were packaged in 8-ounce 
containers and distributed to retail stores in New York and New Jersey. 

Source: http://foodpoisoningbulletin.com/2015/ossies-fish-recalled-for-undeclared- 
allergens/ 

10. April 22, Associated Press - (Minnesota) Bird flu hits 13 more Minnesota farms 
with over 430K turkeys. The U.S. Department of Agriculture reported April 22 that 
H5N2 avian flu infections were confirmed on 13 additional Minnesota farms with over 

430.000 turkeys, increasing the total number of farms affected across the State to 44 
and the total number of birds affected to 2.6 million. 

Source: http://minnesota.cbslocal.com/2015/Q4/22/bird-flu-hits-13-more-minnesota- 
farms-with-over-430k-turkeys/ 

11. April 22, WQOW 18 Eau Claire - (Wisconsin) 5th avian flu case detected in 
Wisconsin. Officials responded April 22 to the detection of the H5 avian flu at an 

800.000 bird egg-laying chicken flock in Jefferson County and an 87,000 bird turkey 
flock in Chippewa County. The properties were quarantined and the remaining birds 
were culled as a precaution. 

Source: http://www.wqow.com/storv/28868590/2015/04/22/avian-flu-hits-chippewa- 
county 

12. April 22, U.S. Department of Labor - (Georgia) Dupont Yard Inc. continues its 
history of exposing workers to hazardous workplace conditions at its Homerville, 
Georgia facility. Dupont Yard Inc., was cited by the Occupational Safety and Health 
Administration for 14 violations following an October 2014 inspection of the 
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company’s Homerville, Georgia facility that was initiated by worker complaints. 
Proposed penalties total $179,388. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=27828 
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Water and Wastewater Systems Sector 

13. April 23, WQAD 8 Moline - (Iowa) Collapsed sewer line sends untreated 

wastewater into local creeks. The Iowa Department of Natural Resources reported 
that repair work on a 10-inch sewer line in Davenport was scheduled to begin April 23 
after erosion of a stream bank exposed the pipe and led to its collapse, causing the 
discharge of about 3,000 to 5,000 gallons of untreated wastewater per day into Goose 
and Duck creeks, which flow into the Mississippi River. Authorities reported that 
residents should stay away from an unnamed tributary as well as Goose and Duck 
creeks until 48 hours after the sewer line is repaired. 

Source: http://wqad.com/2015/Q4/22/collapsed-sewer-line-sends-untreated-wastewater- 
into-local-creeks/ 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 



14. April 23, NJ.com - (New York) 30 students hospitalized for odor at West New York 

school. Thirty students from Albio Sires Elementary School in West New York were 
transported to an area hospital as a precaution April 22 after an odor from an 
overheated belt in the school’s ventilation system filled the school, causing some 
students to complain of nausea. The school was evacuated and aired out before students 
returned to class. 

Source: 

http://www.ni.com/hudson/index.ssf/2015/04/30 students hospitalized for odor at w 
est new york.html 

15. April 22, Associated Press - (California) Southern California wildfire 85 percent 
contained. Fire crews reached 85 percent containment April 22 of a 1,049-acre wildfire 
burning in the river basin behind southern California’s Prado Dam. Authorities 
expected full containment of the wildfire by April 24. 

Source: http://www.utsandiego.com/news/2015/apr/22/southern-california-wildfire-85- 
percent-contained/ 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

16. April 23, Softpedia - (International) Improper parsing of SSID info exposes Wi-Fi 
client’s memory contents. Security researchers at Alibaba and Google discovered a 
vulnerability in the cross -platform “wpa supplicanf ’ Wi-Fi software that affects 
versions 1.0 - 2.4 with the Config_P2P option turned on and could allow an attacker to 
create a service set identifier (SSID) buffer overflow condition, potentially exposing 
sensitive information in the memory of the device and allowing for arbitrary code 
execution. 

Source: http://news.softpedia.com/news/Improper-Parsing-of-Wi-Fi-SSID-Info- 
Exposes -Memory-Content s -47 9155. shtml 

17. April 23, Softpedia - (International) Net Nanny parental control software vulnerable 
to HTTPS spoofing. Researchers from Carnegie Mellon’s Computer Emergency 
Response Team (CERT) discovered security vulnerabilities in Content Watch’s Net 
Nanny software resulting from its use of man-in-the-middle (MitM) proxies and the 
same root certificates and private key for all installations, the latter of which is included 
in plain text in the application. The researchers believe that an attacker could use the 
key to generate new certificates to spoof legitimate Web sites and avoid user alerts for 
malicious domains. 

Source: http://news.softpedia.com/news/Net-Nanny-Parental-Controls-Software- 
Vulnerable-to-HTTPS-Spoofing-479183.shtml 

18. April 23, Help Net Security - (International) Banking botnets persist despite 
takedowns. Dell SecureWorks released analysis from its annual Top Banking Botnets 
report revealing that attackers targeted an array of Web sites in addition to traditional 
banking portals, including those related to corporate finance and payroll services, stock 
trading, employment portals, and email services in 2014, that over 90 percent of the 
1,400 financial institutions targeted worldwide were in the U.S., and that attackers 
began avoiding countries where international transactions are more difficult, among 
other findings. 

Source: http://www.net-securitv.org/secworld.php7idM8287 

19. April 22, Softpedia - (International) Malware uses invisible command line argument 
in shortcut file. Security researchers at F-Secure discovered that a variant of the 
Janicab trojan for Microsoft Windows delivered as a link (LNK) file includes invisible 
shell commands and uses the right-to-left override (RLO) technique to avoid detection. 
The malware has existed for two years, and uses Python and Visual Basic Scripts 
(VBScript) to infect machines. 



-6- 



Source: http://news.softpedia.com/news/Malware-Uses-Invisible-Command-Line- 
Argument-in-Shortcut-File-47 9119 . shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

20. April 23, WCTI 12 New Bern - (North Carolina) Phone lines back in service in 

Onslow County. Landline service for Century Link customers in the Jacksonville area 
of Onslow County was restored April 23 after a disruption due to a faulty piece of 
equipment that lasted over 24 hours beginning April 22. 

Source: http://www.wctil2.com/news/phone-lines-down-for-most-of-day-in- 
iacksonville/32512810 



[ Return to top ] 



Commercial Facilities Sector 

21. April 23, Salt Lake City Deseret News - (Utah) Person questioned after fire destroys 
apartments, displaces 28. An April 22 fire that rendered a West Valley City, Utah 
apartment building a total loss displaced 28 residents and hospitalized 1 person. Police 
are investigating the fire that was ruled “human-caused”. 

Source: http://www.deseretnews.com/article/865627072/Person-questioned-after-fire- 
destrovs-apartments-displaces-28.html 

22. April 22, KNXV 15 Phoenix - (Arizona) City shuts down Glendale West Apartments 
citing safety, fire hazards. City of Glendale officials ordered the eviction of residents 
from more than 20 units of the Glendale West Apartments complex April 22 when the 
property was shut down due to unsafe living conditions including exposed wiring and 
the lack of fire safety equipment. About 19 additional residents were ordered to leave a 
different portion of the property in February due to similar safety concerns. 

Source: http://www.abcl5.com/news/region-west-valley/glendale/citv-shuts-down- 
glendale-west-apartments-citing-safetv-fire-hazards 

23. April 21, U.S. Department of Labor - (Texas) Dollar Tree Store endangers workers 
again in Texas. The Occupational Safety and Health Administration cited Dollar Tree 
Stores Inc., April 21 for 4 serious and 2 repeat violations following a November 2014 
inspection of a Houston store that revealed blocked exit routes and improperly stored 
helium cylinders, among other findings. Proposed penalties total $116,200. 
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Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=278 19 
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Dams Sector 

24. April 21, W1BW 13 Topeka - (Kansas) Levees to move forward, protect city and 
bring fun. The mayor of Topeka announced April 21 that the U.S. Corps of Engineers 
allocated $7 million to the City of Topeka as a part of a 3 year, $29 million project to 
improve the city’s levee system, which will include an increase in the reliability of the 
system and will protect 6,500 residents, 790 businesses, and numerous public utility 
facilities. 

Source: http://www. wibw.com/home/headlines/Levees-To-Move-Forw ard-Protect- 
Citv-And-Bring-Fun-300832791.html 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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